As a step towards adding other potential streaming ciphers. As well as just
pushing the loop down into the rijndael APIs (bascially 128-bit wide AES-ICM
mode) to eliminate some excess explicit_bzero().